by White Scorpion
Written in Assembler, source included
Released in August 2005
Made in The Netherlands
dropped files: c:\WINDOWS\msexec.exe size: 6,656 bytes port: 1 TCP startup: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon "Userinit" old data: C:\WINDOWS\system32\userinit.exe, new data: C:\WINDOWS\msexec.exe userinit.exe tested on Windows XP October 02, 2005MegaSecurity